Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Pass the PCI SSC Certification CPSA Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.
Exam CPSA Premium Access

View all detail and faqs for the CPSA exam

Go to Exam

361 Students Passed

88% Average Score

95% Same Questions
Viewing page 1 out of 2 pages
Viewing questions 1-10 out of questions
Questions # 1:

You wish to check that you are using the most current version of the Card Production requirements. What should you do?

Options:

A.

Have the CPSA Company’s point of contact request the document

B.

Download it from PCI SSC’s Document Library

C.

Email a request for the document to PCI SSC

D.

View it directly via PCI SSC Assessor Portal

Questions # 2:

Who performs regular AQM audits of CPSA companies?

Options:

A.

Issuing banks

B.

Payment brands

C.

PCI SSC

D.

Vendor

Questions # 3:

During an assessment you do a walk-through of bringing card products into the HSA using the goods-tools trap. You act as production staff, using an empty cardboard box as the card products. During the process, the guard escorts you, along with the box, into the pre-press room. What is your conclusion?

Options:

A.

Compliant, because the guard escorted you

B.

Compliant, because the guard ensured that the card product remained under dual control

C.

Not compliant, because an inventory of the card product did not take place prior to entry

D.

Not compliant, because the guard escorted you

Questions # 4:

A vendor receives cardholder information and keys from a bank. The vendor then performs the following:

* Uses its HSM to create keys

* Creates cardholder information specific to each cardholder, including name and PAN

* Formats the data for the hardware that will put it on a card

* Writes it to an encrypted file

Which of the following best describes this process?

Options:

A.

Data creation

B.

Data preparation

C.

Manufacture

D.

Pre-personalization

Questions # 5:

Before you go on-site, the vendor’s primary contact communicates a legitimate reason for delaying the assessment for several months. Who can approve the change in the report delivery schedule?

Options:

A.

Vendor senior management

B.

Payment brands

C.

Affected issuers

D.

PCI SSC

Questions # 6:

In which of the following locations must the CCTV and access control servers be located?

Options:

A.

Within the Security Control Room (SCR)

B.

Within a room in the HSA with security controls equivalent to the SCR applied

C.

Within the SCR or a room with equivalent security

D.

Within the secure server room inside of the HSA

Questions # 7:

Which of the following statements about unsolicited visitors is true?

Options:

A.

They must be turned away

B.

They must complete an NDA before entry is granted

C.

They must be able to prove a legitimate reason for their visit prior to entry

D.

They must be registered, their identities confirmed, and must be allocated an escort before entry

Questions # 8:

Which of the following must be used by the vendor to protect doors that provide access to buildings containing air conditioning equipment?

Options:

A.

Security tape that will leave an observable trace each time a door is opened

B.

Electrical contacts that log each open and close event to a secure system memory

C.

Magnetic contacts that are permanently alarmed and that are connected to the security control-room panels

D.

Physical locks with a limited set of keys under constant supervision by a guard in the security control-room

Questions # 9:

An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?

Options:

A.

Payment brands

B.

Issuing banks

C.

Vendor

D.

PCI SSC

Questions # 10:

John works for ACME Inc Personalizers. an organization that personalizes payment cards as well as printing the corresponding PIN mailers for distribution directly to the cardholder. Which of the following statements is true?

Options:

A.

If John is involved in card personalization then he must not be involved in the printing of the corresponding PINs

B.

If John is involved in card personalization, then he must never be involved in the card shipment process

C.

If John is involved in card personalization, then he must never be involved in PIN printing

D.

If John is involved in PIN printing, then he must never be involved in the card shipment process

Viewing page 1 out of 2 pages
Viewing questions 1-10 out of questions
TOP CODES

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.

2V0-11.25
ADM-201
Agentforce-Specialist
CMMC-CCP
Data-Cloud-Consultant
PCNSE
PDI
PSE-Strata-Pro-24
Secure-Software-Design
Sharing-and-Visibility-Architect
Workday-Pro-Integrations
ZDTA